Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/ef046d-f959-4798-96b8-cfe1647ea865/1/WCroA98isFXHTl_o8R2UQIlWDtI.mft
File: WCroA98isFXHTl_o8R2UQIlWDtI.mft (raw, json)
Hash identifier: JkZTtbov++lakaVc61K4LTDXSPo3sr3kjDRDyqLgSRQ=
Subject key identifier: 3F:7A:40:BD:C3:39:23:FC:75:96:A9:9A:8A:EF:16:3C:02:CD:9B:CA
Authority key identifier: 58:2A:E8:03:DF:22:B0:55:C7:4E:5F:E8:F1:1D:94:40:89:56:0E:D2
Certificate issuer: /CN=582ae803df22b055c74e5fe8f11d944089560ed2
Certificate serial: 01984A0A6A2B4DA8B12361A19079CA878F3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WCroA98isFXHTl_o8R2UQIlWDtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/ef046d-f959-4798-96b8-cfe1647ea865/1/WCroA98isFXHTl_o8R2UQIlWDtI.mft
Manifest number: 90
Signing time: Sun 27 Jul 2025 04:00:53 +0000
Manifest this update: Sun 27 Jul 2025 04:00:53 +0000
Manifest next update: Mon 28 Jul 2025 04:00:53 +0000
Files and hashes: 1: 5Vle3KGfqnVJEdmvBasCstldoz8.roa (hash: Rl95m9yb5FSNGdnRgF3OQpiAhZ5L8MWgdG8dVfAGWKo=)
2: WCroA98isFXHTl_o8R2UQIlWDtI.crl (hash: Rc88y7TGgiwJ5VeGyDWjQbEXUf8qwVsC0XrHu4502bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/ef046d-f959-4798-96b8-cfe1647ea865/1/WCroA98isFXHTl_o8R2UQIlWDtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/ef046d-f959-4798-96b8-cfe1647ea865/1/WCroA98isFXHTl_o8R2UQIlWDtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WCroA98isFXHTl_o8R2UQIlWDtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:6a:2b:4d:a8:b1:23:61:a1:90:79:ca:87:8f:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=582ae803df22b055c74e5fe8f11d944089560ed2
Validity
Not Before: Jul 27 04:00:53 2025 GMT
Not After : Jul 28 04:00:53 2025 GMT
Subject: CN=3f7a40bdc33923fc7596a99a8aef163c02cd9bca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:84:bc:3c:7d:5f:b2:48:35:c5:a8:c6:60:6b:
ea:a6:62:22:55:67:99:e8:4e:0f:c2:05:d7:db:58:
d3:84:c6:88:4c:05:79:a2:0a:e7:8e:b0:6e:5e:ff:
4a:26:6a:40:a2:f4:35:00:7f:df:27:92:14:6f:08:
e7:e8:26:a0:f6:54:92:4c:ec:c6:c4:5d:cc:b2:0c:
75:82:c9:4f:70:8d:11:be:84:13:68:dc:83:0f:a3:
fe:32:67:72:3d:d5:1e:71:37:69:d0:40:fb:be:81:
b6:52:04:99:6a:3e:47:2c:89:ec:48:e1:75:b9:e8:
16:3a:cf:e4:02:d8:0b:53:c3:74:de:da:3c:d4:90:
09:db:5a:5d:02:ab:76:85:05:b2:3a:1d:b6:22:a5:
52:6d:b0:11:04:28:47:33:5d:8f:1d:93:fd:50:7a:
98:82:1d:1a:65:60:f6:4f:16:9e:0e:70:38:8b:e3:
7b:92:97:a6:bf:00:97:65:b2:23:6b:3e:74:14:af:
8b:83:7e:ba:c5:f3:c9:5b:51:a2:55:32:b3:f5:bf:
33:1c:41:6a:95:58:7b:8d:cc:70:24:b6:5f:75:a2:
64:97:1f:46:fe:9c:e5:02:eb:48:e6:22:d9:04:a0:
f8:a9:c6:20:1f:64:a6:5e:f3:c2:f5:be:b7:3e:4d:
df:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:7A:40:BD:C3:39:23:FC:75:96:A9:9A:8A:EF:16:3C:02:CD:9B:CA
X509v3 Authority Key Identifier:
keyid:58:2A:E8:03:DF:22:B0:55:C7:4E:5F:E8:F1:1D:94:40:89:56:0E:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WCroA98isFXHTl_o8R2UQIlWDtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ef046d-f959-4798-96b8-cfe1647ea865/1/WCroA98isFXHTl_o8R2UQIlWDtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ef046d-f959-4798-96b8-cfe1647ea865/1/WCroA98isFXHTl_o8R2UQIlWDtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:f6:0a:e8:8c:9b:d3:a6:bd:0f:e3:c2:eb:2e:e3:6f:4d:6d:
55:3b:17:b2:e3:6d:1c:0e:c4:08:f2:92:9a:99:d9:eb:0a:aa:
26:cd:fa:05:84:e7:0e:7f:97:d2:fc:1a:1d:97:9b:94:c3:9f:
9b:60:ef:4f:42:82:d9:6a:c0:1f:59:78:a1:3d:8a:24:6a:f8:
23:e9:42:8d:03:bf:71:fd:f7:0d:5e:86:d9:ab:ab:74:1e:aa:
d8:5d:2f:cd:00:bb:8c:2a:30:61:eb:f7:f0:a2:a1:27:e8:ce:
9e:cc:d1:20:e3:9e:c4:0f:69:15:1a:31:00:e9:ba:89:b8:2c:
dd:7c:f7:25:38:42:3d:99:08:5f:78:95:f5:e2:48:f7:e0:8f:
ea:72:bc:e3:50:8d:95:16:bb:d8:94:be:d1:d2:71:4c:8d:f1:
e5:7c:88:6c:a2:ae:90:5f:54:32:78:39:00:c1:44:14:ef:ea:
61:48:fc:8f:a3:1a:3d:29:a0:e5:46:a6:a4:cd:95:7b:db:11:
17:d5:1b:45:11:23:d7:2d:2e:3e:9b:71:a5:96:7b:dd:15:94:
62:92:fc:52:a5:4b:51:8c:1a:fd:d2:97:12:49:79:22:05:ce:
ed:77:f3:1d:33:44:06:17:5a:99:54:5f:81:6f:c4:7a:0a:25:
a7:77:87:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:22:27 2025 by rpki-client